What is claimed is: 



1 . A method of customizing individual internet access in a system comprising the 
following acts: 

5 registration of a user with the system by entry of information about the user at a 

carding station; 

storing in a server information on whether the user is authorized to access specific 
internet sites; 

generating a personal smart card for the user at a carding station, the personal 
10 smart card including information that uniquely identifies the user and not including a 
microprocessor; 

reading the personal smart card at an internet station; 

identifying the user based on the information stored on the personal smart card; 
controlling the user's access to the specific internet sites based on the information 
15 stored in the server regarding whether the user is authorized to access the specific internet 
sites; and 

displaying the internet at the internet station. 

2. The method of customizing individual internet access in a system as defined in 
20 claim 1 wherein registration includes entering personal identification information about 

the user at the carding station. 

3. The method of customizing individual internet access as defined in claim 1 
wherein registration includes entering a personal identification number at the carding 

25 station, the personal identification number providing security for the personal smart card. 

4. The method of customizing individual internet access as defined in claim 1 
wherein registration includes entering a password at the carding station, the password 
providing security for the personal smart card. 

30 
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5. The method of customizing individual internet access as defined in claim 1 
wherein registration includes scanning a fingerprint or other biometric data of the user, the 
fingerprint or other biometric data providing security for the personal smart card. 

5 6. The method of customizing individual internet access in a system as defined in 
claim 1 wherein registration includes entering the information on whether the user is 
authorized to access the specific internet sites at the carding station. 

7. The method of customizing individual internet access in a system as defined in 
10 claim 1 wherein said controlling act is performed by a server. 

8. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said controlling act includes granting or denying requests from the 
internet station to display the specific internet sites based on the information stored in said 

15 server regarding whether the user is authorized to access the specific internet sites. 

9. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said registration act includes establishing an internet access level for the 
user, the access level being selected from the group consisting of an unfiltered internet 

20 access level, a filtered access level, and a restricted access level, such that the information 
on whether the user is authorized to access the specific internet sites includes the access 
level for the specific user. 

10. The method of customizing individual internet access in a system as defined in 
25 claim 9 wherein said controlling act includes granting the user full access to all internet 

sites with the unfiltered access level. 

1 1 . The method of customizing individual internet access in a system as defined in 
claim 9 wherein said controlling act includes blocking the user's access to one or more 

30 predetermined internet sites with the filtered access level. 
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12. The method of customizing individual internet access in a system as defined in 
claim 1 1 wherein said registration act further includes a system administrator selecting the 
one or more predetermined internet sites. 

5 13. The method of customizing individual internet access in a system as defined in 
claim 1 1 wherein said registration act further includes the user or a representative of the 
user selecting the one or more predetermined internet sites. 

14. The method of customizing individual internet access in a system as defined in 
10 claim 1 1 wherein said registration act further includes a third party selecting the one or 

more predetermined internet sites. 

15. The method of customizing individual internet access in a system as defined in 
claim 9 wherein said controlling act includes blocking the user's access to any internet 

15 sites that is not included in a predetermined set of approved internet sites. 

16. The method of customizing individual internet access in a system as defined in 
claim 15 wherein said registration act further includes a system administrator selecting the 
one or more predetermined internet sites. 

20 

17. The method of customizing individual internet access in a system as defined in 
claim 15 wherein said registration act further includes the user or a representative of the 
user selecting the one or more predetermined internet sites. 

25 18. The method of customizing individual internet access in a system as defined in 
claim 15 wherein said registration act further includes a third party selecting the one or 
more predetermined internet sites. 

19. The method of customizing individual internet access in a system as defined in 
30 claim 1 wherein said controlling act includes reviewing the contents of a requested site 
and blocking the site if it contains selected material. 
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20. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said generating act includes storing the information that identifies the user 
in a read only memory on the personal smart card. 

5 21. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said generating act includes taking a photograph of the user with a digital 
camera again, system currently is configured with a digital camera. 

22. The method of customizing individual internet access in a system as defined in 
10 claim 21 wherein said generating act further includes printing the photograph on said 

personal smart card. 

23. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said generating act includes printing the personal smart card from a card 

15 printer. 

24. The method of customizing individual internet access in a system as defined in 
claim 1 further comprising the act of providing a data display unit at the internet station, 
the data display unit selected form the group consisting of a telephone, a television, a 

20 pager, a computer terminal, and a personal digital assistant. 

25. The method of customizing individual internet access in a system as defined in 
claim 1 wherein said reading act is performed by a card reader. 

25 26. The method of customizing individual internet access in a system as defined in 
claim 1 further comprising the act of authenticating the personal smart card. 

27. The method of customizing individual internet access defined in claim 26 further 
comprising the act of establishing a secure sockets layer protocol to provide security for 
30 data transferred across an internet connection in the authenticating act. 
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28. The method of customizing individual internet access defined in claim 27 further 
comprising the act of encrypting the data at said internet station and using hypertext 
transfer protocol to transfer the data between said internet station and said server. 

5 29. The method of customizing individual internet access in a system as defined in 
claim 26 wherein said authenticating act includes entering a personal identification 
number that is associated with the personal smart card. 

30. The method of customizing individual internet access in a system as defined in 
10 claim 26 wherein said authenticating act includes entering a password that is associated 

with the personal smart card. 

3 1 . The method of customizing individual internet access in a system as defined in 
claim 26 wherein said authenticating act includes verifying a fingerprint of the user. 

15 

32. The method of customizing individual internet access in a system as defined in 
claim 26 further comprising the act of automatically displaying a predetermined internet 
site when the personal smart card is removed from the card reader. 

20 33. The method of customizing individual internet access as defined in claim 25 

further comprising the act of automatically deleting internet sites viewed by the user at the 
internet station when the personal smart card is removed from the card reader. 

34. The method of customizing individual internet access in a system as defined in 
25 claim 1 further comprising the act of authorizing or denying the user to log onto the 

system based on information stored in the server regarding a maximum amount of time the 
user may view the internet during a time interval. 

35. A system that customizes individual internet access comprising a personal smart 
30 card, said personal smart card including: 

a photograph of the user of the system; and 
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a read only memory that stores information identifying the user to enable the 
system to control the user's internet access; 

wherein said personal smart card does not include a microprocessor. 

5 36. The system that customizes individual internet access as defined in claim 35 
wherein said read only memory is configured as a storage area selected from the group 
consisting of an encoded memory chip, a magnetic stripe, a bar code, and machine 
readable indicia. 

10 37. The system that customizes individual internet access as defined in claim 35 

wherein the information that identifies the user is unique to that personal smart card and 
differentiates it from similar personal smart cards. 

38. The system that customizes individual internet access as defined in claim 35 
15 wherein said personal smart card is generally wallet-sized. 

39. A system that customizes individual internet access comprising a server, said 
server including: 

a registration module that registers a user with the system; 
20 a database that stores information regarding internet sites the user is authorized to 

access; 

an administration module that executes an active server page when an internet site 
is requested to be displayed; and 

a deny module that grants or denies a request to display an internet site based on 
25 the information stored in said database regarding the internet sites the user is authorized to 
access. 

40. The system that customizes individual internet access comprising a server as 
defined in claim 32 wherein the internet sites the user is authorized to access are selected 

30 by a system administrator. 
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41. The system that customizes individual internet access comprising a server as 
defined in claim 39 wherein the internet sites the user is authorized to access are selected 
by system by the user or a representative of the user. 

5 42. The system that customizes individual internet access comprising a server as 

defined in claim 39 wherein the internet sites the user is authorized to access are selected 
by a third party. 

43. The system that customizes individual internet access as defined in claim 39 

10 further comprising a third party filter database that stores information regarding a set of 
internet sites the user is authorized to access. 

44. The system that customizes individual internet access as defined in claim 43 
wherein the set of internet sites are selected by a third party. 

15 

45. A system that customizes individual internet access comprising: 

software adapted to be loaded on a computer that is configured to register a user 
with the system; 

software adapted to be loaded on a computer that is configured store information 
20 regarding internet sites the user is authorized to access; 

software adapted to be loaded on a computer that is configured to execute an active 
server page when an internet site is requested to be displayed; and 

software adapted to be loaded on a computer that is configured to grant or deny a 
request to display an internet site based on the information stored in the system regarding 
25 the internet sites the user is authorized to access. 

46. The system that customizes individual internet access comprising a server as 
defined in claim 45 wherein the internet sites the user is authorized to access are selected 
by a system administrator. 

30 
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47. The system that customizes individual internet access comprising a server as 
defined in claim 45 wherein the internet sites the user is authorized to access are selected 
by the user or a representative of the user. 

5 48. The system that customizes individual internet access comprising a server as 

defined in claim 45 wherein the internet sites the user is authorized to access are selected 
by a third party. 

49. The system that customizes individual internet access comprising a server as 

10 defined in claim 45 further comprising software adapted to be loaded on a computer that is 
configured to store information regarding a pre-selected set of internet sites the user is 
authorized to access. 

50. A system that customizes individual internet access comprising a server as defined 
15 in claim 49 wherein the pre-selected set of internet sites is selected by a third party. 

51. A method of customizing individual internet access comprising the following acts: 
registration of a user of the system and issuance of a smart card identifying the user 

by a unique indicia stored in a read only memory on the card; 
20 determining whether a user is authorized to log onto the system by comparing 

indicia read off of a card and allegedly correlative information from a user to determine if 
a correlation exists; and 

controlling the user's access to specific internet sites. 

25 52. The method of customizing individual internet access as defined in claim 5 1 

wherein said registration act includes entering information into the system on whether the 
user is authorized to access specific internet sites and storing the information in the server. 

53. The method of customizing individual internet access as defined in claim 51 
30 wherein said registration act is performed by a registration module. 
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54. The method of customizing individual internet access as defined in claim 5 1 
wherein said determining act is performed by a registration module. 

55. The method of customizing individual internet access as defined in claim 5 1 

5 wherein said determining act includes accessing whether information stored in the system 
indicates that the user has exceeded a maximum amount of time the user may view the 
internet in a time interval. 

56. A method of customizing individual internet access as defined in claim 51 wherein 
10 said controlling act includes granting or denying a request from an internet station to 

display an internet site based on information stored in the system on whether the user is 
authorized to access the internet site. 

57. A system that assists in customizing individual internet access comprising a 
15 carding station, said carding station including: 

a registration module that enables entry of information about a user into the system 
to register the user with the system and has a data transfer capability for transfer of entered 
user information between said carding station and a server; 

a camera that takes a photograph of the user; and 
20 a card printer that generates a personal smart card not including a microprocessor for the 
user, the personal smart card including information that identifies the user correlated with 
the entered user information transferred to a server. 

58. The system that customizes individual internet access as defined in claim 57 
25 further comprising: 

an imaging module that processes information related to the photograph and 
allows the photograph to be altered; 

a printing module that processes information related to said card printer; 
a carding application that process information related to the imaging module and 
30 the printing module and transfers the information to the registration module; 

a card reader that reads the information stored on the personal smart card; and 
a carding module that process the information related to said card reader. 
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59. The system that customizes individual internet access as defined in claim 57 
wherein the registration module includes data entry screens that allow entry of the 
information about the user into the system. 

5 

60. A system that customizes individual internet access comprising: 
software adapted to be loaded on a computer that is configured to enable entry of 
information about a user into the system and transfer information between the carding 
station and a server to register a user with the system; 

10 software adapted to be loaded on a computer that is configured to process information 
related to a photograph taken by a camera; and 

software adapted to be loaded on a computer that is configured to process information 
related to a card printer that prints a personal smart card for the user, the personal smart 
card including information that identifies the user to enable the system to control the 
15 user's access to specific internet sites and not including a microprocessor. 

61. A method of generating a personal smart card for a user of a system that 
customizes individual internet access, said method comprising the steps of: 

entering information about the user at a data display unit; 
20 requesting a server to register the user with the system; and 

printing a personal smart card and storing information that identifies the user in a memory 
on the smart card not including a microprocessor to enable the system to control the user's 
access to specific internet sites. 

25 62. The method of generating a personal smart card for a user of a system that 

customizes individual internet access as defined in claim 100 further comprising the steps 
of: 

taking a photograph of the user with a camera; 
displaying the photograph on a data display unit; and 
30 cropping the photograph on the data display unit; 

wherein the photograph of the user is printed on said personal smart card. 
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63. A internet station that customizes individual internet access comprising: 

a card reader that reads a read only memory and not a microprocessor on a 
personal smart card issued to a user to obtain information that identifies the user to control 
the user's internet access; 
5 an authentication module that verifies that the user is using his/her own personal 

smart card; 

an internet browser that allows the user to browse the internet; 
a shim that communicates with said internet browser and has a port for connection 
to a server to request permission from the server to display an internet site requested by 
10 the user; and 

a WSOCK that communicates with said shim and displays the internet site 
requested by the user if permission is granted by the server. 

64. The system that customizes individual internet access as defined in claim 63 

15 wherein said internet browser is accessed by the user at a data display unit selected from 
the group consisting of a telephone, a television, a pager, a computer terminal, and a 
personal digital assistant. 

65. The system that customizes individual internet access as defined in claim 63 

20 wherein said internet station has a data entry interface to receive identifying data about a 
user and the authentication module verifies that the user is using his/her own personal 
smart card based on entry of a personal identification number entered at the data entry 
interface that is associated with said personal smart card. 

25 66. The system that customizes individual internet access as defined in claim 63 

wherein said internet station has a data entry interface to receive identifying data about a 
user and the authentication module verifies that the user is using his/her own personal 
smart card based on entry of a password entered at the data entry interface that is 
associated with said personal smart card. 

30 

67. The system that customizes individual internet access as defined in claim 63 
wherein said internet station has a data entry interface to receive identifying data about a 
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user and the authentication module verifies that the user is using his/her own personal 
smart card based on a fingerprint or other biometric data entered at the data entry interface 
that is associated with said personal smart card. 

5 68. The system that customizes individual internet access as defined in claim 63 
wherein said internet browser includes an internet browser selected from the group 
consisting of Netscape Navigator® and Microsoft Internet Explorer®. 

69. The system that customizes individual internet access defined in claim 63 wherein 
10 said internet station further includes a secure sockets layer protocol that provides security 

for data transferred across an internet connection. 

70. The system that customizes individual internet access defined in claim 69 wherein 
the secure sockets layer protocol includes Microsoft CrptoAPI®. 

15 

7 1 . The system that customizes individual internet access defined in claim 69 wherein 
the secure sockets layer protocol enables said internet station to encrypt the data and use 
hypertext transfer protocol to transfer the data. 

20 72. A system that customizes individual internet access comprising: 

software that is adapted to be loaded on a computer that is configured to control a 
card reader that reads a personal smart card issued to a user of the system, the personal 
smart card including information that identifies the user to control the user's internet 
access and not including a microprocessor; 
25 software that is adapted to be loaded on a computer that is configured to 

authenticate the personal smart card; 

software that is adapted to be loaded on a computer that is configured to create an 
internet connection; and 

software that is adapted to be loaded on a computer that is configured to 
30 communicate with the internet browser and request permission from the system to display 
an internet site requested by the user; and 
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software that is adapted to be loaded on a computer that is configured to display the 
internet site requested by the user if permission is granted from the system. 

73. The system that customizes individual internet access as defined in claim 72 
5 wherein the personal smart card is authenticated by entry of a personal identification 

number that is associated with the personal smart card. 

74. The system that customizes individual internet access as defined in claim 72 
wherein the personal smart card is authenticated by entry of a password that is associated 

10 with the personal smart card. 

75. The system that customizes individual internet access as defined in claim 72 
wherein the personal smart card is authenticated by verification of a fingerprint or other 
biometric data of the user. 

15 

76. The system that customizes individual internet access defined in claim 72 further 
including software configured to establish a secure sockets layer protocol that provides 
security for data transferred across an internet connection. 

20 77. The system that customizes individual internet access defined in claim 72 wherein 
the software configured to establish the secure sockets layer protocol includes Microsoft 
CryptoAPI®. 

78. The system that customizes individual internet access defined in claim 72 wherein 
25 the software configured to establish the secure sockets layer protocol encrypts the data and 

uses hypertext transfer protocol to transfer the data. 

79. A method of customizing individual internet access in a system comprising: 
reading a memory and not a microprocessor on a personal smart card issued to a 

30 user of the system, to obtain information that identifies a user; 
authenticating the personal smart card; 

requesting a server to grant the user access to the system ; and 
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displaying the internet via an internet browser. 



80. The method of customizing individual internet access in a system as defined in 
claim 79 wherein said reading step is performed by a card reader and associated software 

5 

8 1 . The method of customizing individual internet access in a system as defined in 
claim 79 wherein said authenticating step is based on entry of a personal identification 
number that is associated with the personal smart card. 

10 82. The method of customizing individual internet access in a system as defined in 

claim 79 wherein said authenticating step is based on entry of a password that is associated 
with the personal smart card. 

83. The method of customizing individual internet access in a system as defined in 

15 claim 79 wherein said authenticating step is based on verifying biometric data of the user. 

84. The method of customizing individual internet access in a system as defined in 
claim 79 wherein said displaying step includes requesting permission from the server to 
display a specific internet site. 

20 

85. The method of customizing individual internet access in a system as defined in 
claim 79 further comprising establishing a secure sockets layer protocol to provide 
security for data transferred across an internet connection. 

25 86. The method of customizing individual internet access defined in claim 85 further 
comprising encrypting the data and using hypertext transfer protocol to transfer the data. 

87. A system that customizes individual internet access comprising: 

a server that registers a user with the system, stores information regarding internet 
30 sites the user is authorized to access, and controls the user's access to the internet sites 
based on the information stored in said server for the specific user; 
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a carding station that provides for entry of information about the user to register 
the user with the server; 

a remote service bureau that generates a personal smart card for the user based on 
the information about the user stored in the server; and 

an internet station that allows the user to view the internet with the personal smart 
card, the personal smart including information that identifies the user to enable the server 
to control the user's access to the internet sites and not including a microprocessor; 

wherein the information about the user stored in the server includes the 
information regarding internet sites the user is authorized to access. 
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